Opening pAMDora's box and unleashing a thousand paths on the journey to play Beatsaber custom songs
tihmstar
39th Chaos Communication Congress (39C3): Power Cycles · Day 1 · Saal One
This talk, presented by tihmstar at 39C3, delves into a comprehensive hardware hacking journey aimed at enabling custom Beat Saber songs on a commercial gaming console. While the ultimate goal might seem lighthearted, the research behind it is a deep, technical exploration of the **AMD Platform Security Processor (PSP)**, a critical component in modern AMD silicon responsible for secure boot and hardware initialization. The presentation outlines a multi-stage process involving bootloader exploitation, custom mod chip development, voltage glitching, and extensive reverse engineering of both firmware and hardware.